Abstract:The rapid development of healthcare big data has brought certain convenience to medical research and health management, but privacy protection of healthcare big data is an issue that must be considered in the process of data application. Access control is one of the methods for privacy protection, but traditional access control models cannot adapt to the dynamic, continuous, and real-time characteristics of healthcare big data scenarios. In this paper, we propose an access control model based on risk quantification and usage control (RQ-UCON). The model adds a risk quantification module to the traditional UCON model to achieve privacy protection of medical data. This module classifies risks into direct and indirect risks and quantifies them based on the physician's visit history. The model stores the quantified risk values as subject attributes. The RQ-UCON model uses an improved Exponentially Weighted Moving Average (EWMA) and penalty factors to predict risk value and to update the risk values of the subject attributes in real-time. The RQ-UCON model uses agglomerative hierarchical clustering to cluster the risk values of physicians within the department, resulting in risk intervals for each physician's operational behavior. Each risk interval is stored as a condition in the RQ-UCON model. Finally, according to the model whether the subject attributes meet the model conditions to determine whether the subject has the corresponding access rights, and according to the risk interval to grant the subject the corresponding access rights. Through the final experiment, it can be seen that the access control model proposed in this paper has a certain control on the excessive access behavior of doctors and has a certain limitation on the privacy leakage of healthcare big data.

Safety Analysis of Usage Control Authorization Models

Safety Analysis for UCONpreA Model with Delegation Feature and Expression for DBRM0

Constraint Function Based Hierarchical Control of Discrete Event Systems

Logical Definition of Usage Control Authorization Model

Permission-based delegation model for Usage Control

Realization of UCON Model Based on Extended-XACML

Model of Attribute-RBAC with Character of Delegation Usage Control

Research on authorization management and evaluation mechanism of usage control

A Time and Mutable Attribute-Based Access Control Model.

Finite automata models of software safety analysis

An Approach to Specifying and Analyzing Context-Aware Access Control Policies

QaSten: Integrating Quantitative Verification with Safety Analysis for AADL Model

On Mutual Support of Modern and Traditional Access Control Models with UCON and BLP As Case Study

Using EHS to Check Completeness and Consistency of UML Statemachines

A Verification Method of Software Safety Model Based on Model Checker

Pervasive Computing Context Access Control Based on UCON_ABC Model.

Research on Database Access Control Technology

A Safety Verification Method Based on Control Constraints

An Improved Ucona-Based Authorization Policy Specification For Ubiquitous Systems

Access Control Model Based on Reputation in P2P Environment

Risk and UCON-based access control model for healthcare big data